Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: NkUGqgHvZefGaIjzQvtGLvQZF357LuFcEzFME9rHNRE=
Subject key identifier: 01:DD:53:54:79:7F:24:9A:3B:68:B0:A7:BB:12:D9:39:39:00:86:50
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019873E21BB3FFD6D5A8D886EA963572D1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1625
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: EDdYAGkUmIV/tqqJ3MjQa68ZHT5tzfaCrHkIqmqd6Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1b:b3:ff:d6:d5:a8:d8:86:ea:96:35:72:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=01dd5354797f249a3b68b0a7bb12d93939008650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:86:dd:d7:0c:43:3b:2a:5f:ef:47:b6:fa:
27:11:71:33:64:df:69:dd:02:db:82:37:4d:28:64:
8a:3b:ff:5b:1a:27:7a:a8:83:77:3b:15:d2:2d:8b:
b7:74:4f:e3:a7:68:92:3a:bc:d9:41:44:c9:3b:47:
63:05:b5:71:09:e3:72:f2:e0:69:58:27:a6:ef:cb:
e0:53:94:4d:32:56:c1:18:ae:60:5e:ba:98:ac:68:
7b:d8:7a:72:b6:79:05:10:cb:6f:99:1d:c3:95:c2:
93:41:81:9f:18:93:18:8f:c4:a2:99:ac:2f:29:de:
fb:13:c2:0c:8d:39:be:57:7d:1d:85:ab:17:e9:cc:
7e:2c:6a:f6:1f:fa:79:eb:c2:31:71:4d:06:9a:67:
7b:a3:cd:fe:42:a9:c8:7b:5d:41:a5:bf:5b:38:85:
1a:58:6f:b3:d8:22:ea:6b:d0:eb:0a:fd:74:31:6e:
73:b2:e6:17:9c:d8:70:dc:0b:d4:1c:57:e7:16:ff:
b2:f9:72:c9:91:4c:25:88:0c:1a:81:db:e3:a4:c1:
40:2f:6b:51:f8:72:10:af:ed:b0:20:06:15:5f:ae:
54:9e:38:0b:2d:04:4a:d8:1e:2c:f9:54:bc:32:60:
63:26:63:2e:92:94:5a:14:8b:91:a8:b3:ba:06:be:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DD:53:54:79:7F:24:9A:3B:68:B0:A7:BB:12:D9:39:39:00:86:50
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f8:15:74:92:af:d0:5e:0a:c4:15:54:c7:7d:c9:b1:e5:1c:
0b:4b:a2:a4:bb:43:ed:75:3c:eb:83:2a:fb:ab:40:f3:69:16:
6e:04:50:a7:e5:d5:02:d5:c6:7f:fb:b2:70:c9:9a:17:54:58:
2e:f4:7c:8a:09:db:1f:f8:a1:08:e6:9f:2a:8f:a6:05:af:c7:
fa:4a:0d:a2:69:9c:d1:0b:9d:4c:4c:4d:19:cc:c2:d5:27:ec:
e5:c3:85:b3:6f:10:20:66:a6:a3:7f:29:46:11:7e:aa:ba:2e:
27:6c:4b:db:e7:c3:f0:3a:b7:b0:0c:74:5e:f7:26:1e:81:08:
53:30:7b:45:ea:00:6a:67:52:2b:10:fd:02:cb:a1:14:eb:6f:
40:0c:cc:7c:eb:6e:c2:8d:e2:48:bb:55:85:c1:b2:2c:8a:ac:
80:7a:46:74:fa:8d:4c:b5:a9:c5:d3:7d:a5:02:95:f8:ed:d5:
5e:1a:36:39:4a:26:55:77:29:04:a9:b1:65:5b:19:a9:8d:1d:
b5:da:27:af:32:78:4e:76:11:45:0d:e0:00:f9:48:2a:ef:38:
a6:e6:4b:15:5a:66:9f:ff:f6:4f:27:5c:ef:b8:aa:c2:4f:86:
1f:43:c7:d9:11:30:da:2b:ae:d9:8d:42:2e:71:94:73:57:55:
20:64:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:06 2025 by rpki-client